Decrypted Telegram bot chatter revealed as new Windows malware

guest · Jan 17, 2019

Decrypted Telegram bot chatter revealed as new Windows malware
january 17, 2019
https://techcrunch.com/2019/01/17/decrypted-telegram-bot-windows-malware/

During an investigation recent, security firm Forcepoint Labs said it found a new kind of malware that was found taking instructions from a hacker sending commands over the encrypted messaging app Telegram.

The researchers described their newly discovered malware, dubbed GoodSender, as a “fairly simple” Windows-based malware that’s about a year old, which uses Telegram as the method to listen and wait for commands.
Once the malware infects its target, it creates a new administrator account and enables remote desktop — and waits. As soon as the malware infects, it sends back the username and randomly generated password to the hacker through Telgram.

Forcepoint said in its research out Thursday that it only stumbled on the malware after it found a vulnerability in Telegram’s notoriously bad encryption.
But the researchers don’t have all the answers. How did the malware get onto victim computers in the first place?
Click to expand...

guest · Jan 17, 2019

Be Careful Using Bots on Telegram
January 17, 2019
https://www.wired.com/story/telegram-bots-tls-encryption/

Bots are popular on Telegram, because they're fun and convenient, and Telegram has supported them since 2015. They are essentially automated Telegram accounts; you can just add them to chats and channels as you would a friend.

But Telegram's bot platform relies instead on the Transport Layer Security protocol used in HTTPS web encryption.
By building its bot platform without MTProto, though, Telegram creates a situation where introducing a bot to a chat or channel essentially downgrades its encryption.

"In a situation where certain chats only use TLS because of bot functionality, a bot would dramatically undercut the security properties of a chat," says Kenn White, director of the Open Crypto Audit Project.
To keep your Telegram communications safe, don't add bots to your chats, and be aware when you're in chats and channels that include them.
Click to expand...

Log in or Sign up

Decrypted Telegram bot chatter revealed as new Windows malware

guest Guest

guest Guest

Log in or Sign up

Decrypted Telegram bot chatter revealed as new Windows malware

guest Guest

guest Guest

Useful Searches